starclaps·8 年前·議論That’s why tools like gosec complain when user input is used to access files - specifically because ‚..‘ allows one to „escape“.Gosec: https://github.com/securego/gosec
Gosec: https://github.com/securego/gosec